Legal

Streetside Privacy Policy Effective date: 30 May 2026 This Privacy Policy explains how Streetside collects, uses, stores, shares and protects personal data when you use the Streetside mobile application, web application, website, platform and related services (together, the "Service"). Streetside is currently operated by Julia Kemp, trading as Streetside ("Streetside", "we", "us" or "our"). Business address: Trinity Church, Queen Square, Bath BA1 2HN Contact email: hello@mystreetside.com Privacy email: hello@mystreetside.com For the purposes of UK data protection law, including the UK General Data Protection Regulation ("UK GDPR") and the Data Protection Act 2018, Julia Kemp trading as Streetside is the data controller of the personal data described in this Privacy Policy. If the Streetside business is transferred to a limited company or another legal entity, that company or legal entity may become the data controller. We explain this further in section 18. 1. About Streetside Streetside helps people discover, follow and support live street musicians and other performers. The Service includes features such as: - Live and approximate map-based discovery; - Streetsideer profiles; - Listener profiles; - "Catches", where users can upload a photograph and note about a Streetsideer they saw; - The "Heard" feed, where users can browse community-submitted Catches; - "Plug in" or "Playing Now" features for Streetsideers broadcasting that they are performing; - Following, saving and Setlist features; - Notifications about nearby or followed Streetsideers; - Links to music, social media and third-party payment platforms. Because Streetside involves user-uploaded content, photographs, location features, identity suggestions, public profiles and community interactions, we take privacy seriously. 2. Personal data we collect We may collect and use the following types of personal data. #2.1 Account data When you create an account or sign in, we may collect: - Name or display name; - Email address; - Username; - Profile photograph; - Account role, such as Listener, Streetsideer or both; - Login provider information; - Authentication identifiers; - Account settings; - Date and time of account creation; - Account status. If you sign in using a third-party provider, such as Spotify, Google, Apple or another provider, we may receive basic profile information and account identifiers from that provider, depending on your settings and the permissions you grant. #2.2 Listener profile and activity data If you use Streetside as a Listener, we may collect: - Streetsideers you follow; - Streetsideers saved to your Setlist; - Catches you create; - Comments, replies, reactions or other interactions; - Reports you submit; - Notification preferences; - Search and discovery activity; - Content you view or engage with; - Approximate interaction timestamps. #2.3 Streetsideer profile data If you create or claim a Streetsideer profile, we may collect: - Performer name or stage name; - Biography; - Profile photograph; - Genre tags; - Instrument tags; - Home city or general location; - Music platform links, such as Spotify, Apple Music, SoundCloud, Bandcamp or YouTube; - Social media handles, such as Instagram or TikTok; - Website links; - Payment links or handles, such as PayPal, PayPal.me, Ko-fi, Buy Me a Coffee, Cash App, Venmo or similar; - Setlist notes; - Playing status; - Live, recent or scheduled performance information; - Follower count and engagement activity; - Profile claim information and verification evidence where relevant. #2.4 Location data With your permission, we may collect and use location data from your device or browser. This may include: - Approximate location; - Precise location, if enabled; - Location attached to a Catch; - Location attached to a Plug, "Playing Now" status or scheduled set; - Location used to show nearby Streetsideers; - Location used to send relevant notifications; - Map-related activity. You can usually disable location access through your device, browser or app settings. Some location-based features may not work properly if location access is disabled. Where a Streetsideer chooses to "Plug in", "Go Live" or show that they are playing now, their approximate or selected performance location may be visible to other users. #2.5 User-generated content When you use Streetside, you may submit content that becomes visible to other users. This may include: - Catches; - Photographs; - Notes; - Comments; - Replies; - Reactions; - Identity suggestions; - Reports; - Streetsideer profile information; - Listener profile information; - Music, social media and payment links; - Setlist-related interactions; - Public performance details; - Other information you choose to submit. User-generated content may contain personal data about you or other people, including Streetsideers or people appearing in photographs. #2.6 Photographs and images When you upload a Catch or profile image, we may collect and process: - The image itself; - Information associated with the image, such as time, location, tags, notes and user account details; - Any visible personal data contained in the image; - Image metadata where available, although we may strip or minimise metadata where appropriate. Photographs uploaded to Streetside may show Streetsideers or other people in public or semi-public spaces. #2.7 Identity, claim and dispute information If someone claims a Streetsideer profile, disputes an identity, requests removal of a photograph, reports false identification, or contacts us about a Catch, we may collect: - Name; - Email address; - Evidence of identity or authority; - Links to music or social profiles; - Details of the dispute or request; - Related content and account information; - Communications with us. We use this information to assess, moderate, remove, verify, transfer or restrict content and profiles where appropriate. #2.8 Communications with us If you contact us by email, through support tools, through reporting flows, or through social media, we may collect: - Your name; - Email address; - Contact details; - Message content; - Attachments or screenshots; - Support history; - Information needed to respond to your request. #2.9 Technical and device data When you use the Service, we may automatically collect: - IP address; - Device type; - Device identifiers; - Browser type; - Operating system; - App version; - Language settings; - Referring URLs; - Pages or screens viewed; - Clicks, taps and interactions; - Session data; - Crash logs; - Error logs; - Security logs; - Approximate location derived from IP address; - Cookie and similar technology data. #2.10 Safety, moderation and legal data To protect users and operate the Service, we may collect and process: - Reports submitted by users; - Moderation decisions; - Content removal records; - Account restriction records; - Abuse signals; - Fraud signals; - Safety-related logs; - Evidence of policy breaches; - Records needed to comply with legal obligations; - Records needed to cooperate with regulators, law enforcement or safeguarding bodies. 3. Personal data we do not intentionally collect Streetside is not designed to collect special category personal data, such as information about health, religion, political opinions, sexual orientation or biometric identification. However, users may choose to include sensitive information in profile text, comments, photographs, music links, performance descriptions or other content. Please do not upload sensitive personal information unless you are comfortable with it being processed and, where relevant, publicly visible. Streetside does not knowingly collect personal data from children under 16. 4. How we use personal data We use personal data for the following purposes. #4.1 To create and manage accounts We use account data to: - Create your account; - Authenticate you; - Let you log in; - Manage your profile; - Maintain account settings; - Provide account support; - Secure your account. #4.2 To operate core Streetside features We use personal data to: - Display Streetsideer profiles; - Display Listener profiles where relevant; - Publish Catches; - Operate the Heard feed; - Show live, recent and scheduled map pins; - Let users follow Streetsideers; - Create and manage Setlists; - Send relevant notifications; - Enable Streetsideers to "Plug in" or show they are playing now; - Display music, social and payment links added by Streetsideers; - Enable reporting, claiming and removal flows. #4.3 To provide location-based discovery We use location data to: - Show Streetsideers nearby; - Attach location to Catches and Plugs; - Display live, recent and scheduled performances; - Send location-relevant notifications; - Help users discover music happening around them; - Improve location accuracy and user experience. We process device location with your permission where required. #4.4 To support community discovery and identification We use Catches, identity suggestions, comments, profile claims and related information to: - Help Listeners find Streetsideers they walked past; - Help Streetsideers discover existing audience interest; - Allow Streetsideers to claim Catches or profiles; - Allow users to identify performers where appropriate; - Resolve identity disputes; - Remove false, harmful or privacy-invasive identifications. #4.5 To moderate content and keep Streetside safe We use personal data to: - Review reports; - Detect and prevent harassment, stalking, doxxing, impersonation, copyright infringement, fraud, false identification and abuse; - Remove unlawful or harmful content; - Suspend or restrict accounts; - Enforce our Terms, Acceptable Use Policy and Community Standards; - Protect users, Streetsideers, venues and the public; - Comply with legal and regulatory obligations. #4.6 To communicate with you We use your contact details to: - Send account messages; - Send service updates; - Respond to support requests; - Notify you about changes to our terms or policies; - Send security alerts; - Send marketing or product emails where permitted by law; - Respond to legal, privacy, removal or intellectual property requests. #4.7 To improve and develop the Service We use usage, technical and interaction data to: - Understand how users use Streetside; - Fix bugs; - Improve performance; - Develop new features; - Improve map, feed and notification functionality; - Test changes; - Analyse user engagement; - Improve safety and moderation systems. Where possible, we use aggregated or anonymised data for analytics and product improvement. #4.8 To comply with legal obligations We may use personal data to: - Comply with UK GDPR, the Data Protection Act 2018, PECR, the Online Safety Act 2023 and other applicable laws; - Respond to lawful requests from courts, regulators, law enforcement or authorities; - Keep legally required records; - Preserve evidence; - Defend or bring legal claims; - Protect rights, safety and property. 5. Our lawful bases under UK GDPR We rely on different lawful bases depending on the purpose of processing. | Purpose | Lawful basis | |---|---| | Creating and managing your account | Performance of a contract | | Providing core Service features | Performance of a contract | | Displaying Streetsideer profiles and Listener-submitted content | Performance of a contract and legitimate interests | | Processing location data to show nearby content | Consent where required by device/browser permissions; performance of a contract for selected or submitted location features | | Showing Streetsideers as live, recent or scheduled on the map | Performance of a contract and legitimate interests | | Publishing Catches and Heard feed content | Performance of a contract and legitimate interests | | Processing photographs of public or semi-public performances | Legitimate interests, with safeguards and removal rights | | Identity suggestions, claims and disputes | Legitimate interests | | Content moderation, safety and abuse prevention | Legitimate interests and legal obligation | | Online Safety Act-related safety measures | Legal obligation and legitimate interests | | Sending service messages | Performance of a contract and legitimate interests | | Sending marketing emails or optional digests | Consent, or legitimate interests where permitted by law | | Cookies and similar technologies | Consent where required under PECR; legitimate interests or strictly necessary basis for essential technologies | | Analytics and product improvement | Legitimate interests or consent depending on the technology used | | Responding to legal requests and enforcing rights | Legal obligation and legitimate interests | | Security, fraud prevention and misuse prevention | Legitimate interests | | Business transfer to a future company | Legitimate interests, and legal obligation where applicable | Where we rely on consent, you may withdraw consent at any time. Where we rely on legitimate interests, we balance our interests against your rights and freedoms. You may object to processing based on legitimate interests in certain circumstances. 6. Our legitimate interests Our legitimate interests include: - Operating and improving Streetside; - Helping users discover live street musicians; - Helping Streetsideers be found, followed and supported; - Maintaining public profiles, Catches, Heard feed and map features; - Preventing abuse, fraud, harassment, doxxing, stalking, impersonation and false identification; - Protecting Streetsideers, Listeners and other people depicted in content; - Handling copyright, privacy and identity disputes; - Enforcing our Terms and policies; - Securing the Service; - Defending legal claims; - Transferring the business to a limited company or successor entity. 7. Public content and visibility Some information you submit to Streetside may be public or visible to other users. This may include: - Streetsideer profile information; - Stage name or display name; - Profile photograph; - Biography; - Genre and instrument tags; - Music links; - Social links; - Payment links; - Live, recent or scheduled performance location; - Catches; - Heard feed posts; - Catch photos, notes, tags, time and location; - Comments, replies and reactions; - Follower or engagement information where displayed; - Identity suggestions where displayed. Do not submit information you do not want other users to see. Even if you delete content, other users may have viewed, screenshotted, shared or saved it. 8. Photographs, Catches and people depicted in content The Catch feature allows users to submit photographs of live music performances. Streetsideers or other people may appear in these photographs. We rely on legitimate interests for some processing of photographs taken in public or semi-public performance settings, subject to safeguards. These safeguards include: - Catches should only relate to public or semi-public performances; - Users must not upload unlawful, intrusive, humiliating, exploitative or unsafe images; - Users must not use Catches to harass, shame, stalk, defame or expose people; - Users must not falsely identify performers; - Streetsideers and other depicted people can request removal; - We may remove or restrict content where we believe it creates privacy, safety, legal or reputational risk; - We do not allow Streetside to be used for negative ratings, abuse or targeted harassment. If you are depicted in a Catch and want it removed, email hello@mystreetside.com with enough information for us to identify the content. 9. Location data and live broadcasting Streetside uses location features to help users find live street musicians nearby. Location data may be: - Provided by your device or browser; - Selected manually by you; - Attached to a Catch; - Attached to a Streetsideer's "Playing Now" status; - Used for notifications; - Used to show map pins. If you are a Streetsideer and choose to go live, plug in, or publish a scheduled set, your selected or approximate performance location may be visible to other users. Do not use location features if you do not want your approximate performance location to be visible. You can manage device location permissions through your device or browser settings. 10. Cookies and similar technologies We use cookies and similar technologies to operate the Service. These may include: - Strictly necessary cookies or local storage needed for login, security and core functionality; - Preference technologies that remember settings; - Analytics technologies, where enabled; - Performance and error monitoring technologies; - Marketing technologies, only if introduced and where permitted by law. We do not currently use third-party advertising cookies unless stated in our Cookie Policy. Under PECR, consent is generally required for non-essential cookies and similar technologies. Strictly necessary technologies may not require consent. If we introduce analytics, marketing or non-essential tracking technologies, we will provide appropriate information and obtain consent where required. More information is available in our Cookie Policy. 11. Who we share personal data with We do not sell your personal data. We may share personal data with the following categories of recipients. #11.1 Other users Content you publish may be visible to other users, including Streetsideer profiles, Catches, Heard posts, comments, reactions, map pins, social links and payment links. #11.2 Service providers We may use trusted service providers to operate the Service, such as: - Hosting providers; - Database providers; - Authentication providers; - Map providers; - Email providers; - Push notification providers; - Analytics providers; - Error monitoring providers; - Cloud storage providers; - Moderation, safety or support tools; - Legal, accounting and professional advisers. Current or expected providers may include Supabase, Vercel, Mapbox and email or notification providers. We may update providers from time to time. #11.3 Third-party platforms you choose to link If you add or click music, social media or payment links, you may interact directly with third-party platforms such as Spotify, Apple Music, SoundCloud, Bandcamp, YouTube, Instagram, TikTok, PayPal, Ko-fi, Buy Me a Coffee, Cash App or Venmo. Those third-party platforms process data under their own terms and privacy policies. #11.4 Authorities, regulators and legal parties We may share personal data where necessary to: - Comply with law; - Respond to lawful requests; - Cooperate with regulators; - Cooperate with law enforcement; - Protect users or the public; - Report illegal or harmful content; - Defend or bring legal claims; - Enforce our Terms and policies. #11.5 Business transfer If Streetside is incorporated, reorganised, transferred, sold, merged, financed or otherwise restructured, personal data may be transferred to the relevant company, buyer, investor, acquirer, successor or professional advisers, subject to appropriate safeguards. 12. International transfers Some of our service providers may process personal data outside the UK, including in the United States. Where personal data is transferred outside the UK, we will take steps required by applicable data protection law. These may include relying on: - UK adequacy regulations; - The UK International Data Transfer Agreement; - The UK Addendum to the EU Standard Contractual Clauses; - Other lawful transfer mechanisms. 13. How long we keep personal data We keep personal data only for as long as reasonably necessary for the purposes described in this Privacy Policy. Typical retention periods are: | Data type | Typical retention period | |---|---| | Account data | For as long as your account is active, then usually deleted or anonymised within 30 days after account deletion unless retention is needed | | Streetsideer profile data | For as long as the profile is active or claimed, then deleted, anonymised or archived after deletion or dispute resolution | | Catches and Heard content | For as long as the content remains live, or until removed by you, a depicted person, a Streetsideer, or us | | Live location / Plug records | For as long as needed to operate the feature, then retained in reduced or historical form where necessary | | Comments and reactions | For as long as the associated content or account remains live, unless removed earlier | | Reports and moderation records | As long as needed for safety, enforcement, legal, regulatory or dispute purposes | | Support communications | Usually up to 2 years after resolution, unless longer retention is needed | | Technical logs | Usually 30 to 90 days, unless needed for security, fraud, debugging or legal reasons | | Backups | Deleted data may remain in encrypted backups for up to 90 days | | Legal records | As long as needed to comply with law, resolve disputes or enforce rights | We may retain limited information after account deletion where necessary to prevent abuse, enforce bans, comply with law, resolve disputes, preserve evidence or protect rights. 14. Security We use reasonable technical and organisational measures to protect personal data. These may include: - HTTPS encryption in transit; - Access controls; - Authentication protections; - Database security controls; - Provider security controls; - Backups; - Monitoring and logging; - Restricted administrative access; - Incident response processes. No online service is completely secure. You are responsible for keeping your account credentials safe and notifying us if you suspect unauthorised access. 15. Data breaches If we become aware of a personal data breach, we will assess it and take appropriate action. Where required by law, we will notify the Information Commissioner's Office ("ICO") and affected individuals. 16. Your rights Under UK data protection law, you may have the right to: - Access the personal data we hold about you; - Request correction of inaccurate data; - Request deletion of your data; - Request restriction of processing; - Object to processing based on legitimate interests; - Request data portability; - Withdraw consent where processing is based on consent; - Object to direct marketing; - Complain to the ICO. To exercise your rights, email hello@mystreetside.com. We may need to verify your identity before responding. We will usually respond within one month, unless the request is complex or we are legally allowed to extend the response period. Your rights may be limited in some circumstances, for example where we need to retain information for legal, safety, fraud prevention, moderation or dispute purposes. 17. Marketing We may send you marketing emails, product updates or digest emails where you have consented or where otherwise permitted by law. You can unsubscribe from marketing emails using the unsubscribe link in the email or by contacting hello@mystreetside.com. We may still send non-marketing service messages, such as account, legal, security or support messages. 18. Transfer to a limited company Streetside is currently operated by Julia Kemp, trading as Streetside. If the Streetside business is transferred to a limited company or another legal entity, personal data may be transferred to that company or legal entity as part of the business transfer. Where required by data protection law, we will: - Update this Privacy Policy; - Identify the new data controller; - Notify users of any material change; - Ensure appropriate safeguards are in place; - Continue to respect your data protection rights. After transfer, references to "Streetside", "we", "us" and "our" may refer to the company or legal entity operating the Service. 19. Automated decision-making and profiling We may use automated or semi-automated systems to help recommend Streetsideers, rank content, surface Catches, detect abuse, prevent fraud, personalise notifications or improve discovery. These systems may affect what content you see or how visible certain content is. We do not currently use automated decision-making that produces legal or similarly significant effects on users without human involvement. 20. Children Streetside is not directed at children under 16. You must be at least 16 to use the Service. We do not knowingly collect personal data from children under 16. If you believe a child under 16 has provided personal data to Streetside, contact hello@mystreetside.com and we will take appropriate action. 21. Your responsibilities when uploading personal data about others If you upload content that includes another person's personal data, such as a photograph, name, handle, identity suggestion, comment or location, you are responsible for ensuring you have a lawful basis to do so. You must not upload personal data about others in a way that is unlawful, misleading, defamatory, harassing, invasive, unsafe or contrary to our Terms, Acceptable Use Policy or Community Standards. 22. Links to third-party services The Service may contain links to third-party websites, apps or platforms. We are not responsible for the privacy practices, security or content of third-party services. You should review the privacy policies of any third-party service you use. 23. Changes to this Privacy Policy We may update this Privacy Policy from time to time. If we make material changes, we will take reasonable steps to notify you, such as through the Service, by email or by updating the effective date. Your continued use of the Service after an updated Privacy Policy is published means you acknowledge the updated policy. 24. Complaints If you have concerns about how we use your personal data, please contact us first at hello@mystreetside.com so we can try to resolve the issue. You also have the right to complain to the ICO. The ICO can be contacted through its website at ico.org.uk. 25. Contact us For privacy questions, rights requests, removal requests or complaints, contact: Julia Kemp trading as Streetside Trinity Church Queen Square Bath BA1 2HN Email: hello@mystreetside.com Privacy email: hello@mystreetside.com